Ethereal-users: Re: [Ethereal-users] Filter ack

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: David López Pérez <dalopezperez@xxxxxxxxxxx>
Date: Tue, 28 Mar 2006 19:50:14 +0000
Ok

Thank you
I think I going to filter these frames with the help of the lenght of the frame 
These frame have a lenght of 10b

I'll use --> frame.pkt_len == 10

This is not the best way but it's effective for me

Thank you again



From: Guy Harris <gharris@xxxxxxxxx>
Reply-To: Ethereal user support <ethereal-users@xxxxxxxxxxxx>
To: Ethereal user support <ethereal-users@xxxxxxxxxxxx>
Subject: Re: [Ethereal-users] Filter ack
Date: Tue, 28 Mar 2006 11:01:00 -0800

David L�pez P�rez wrote:
I send an ICMP packet (ping) and I receive the the corresponding immediate acknowledgement 

That's an 802.11-layer acknowlegment, not an ICMP acknowledgment.
For a display filter, I think you could filter on the frame type. I don't know what the right filter would be.
A capture filter could also be constructed, but you'd have to look at the raw bytes of the 802.11 header - the libpcap parser doesn't know about 802.11 frame types. 
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users